Verdict
Most signals looked ordinary, and some evidence was missing. Read the checks below before you pay or hand over personal details.
tfaba.net is moderately trusted.
| What this site appears to be | Technical documentation for TFABA, an open-registration agent marketplace pilot describing agent registration, SIXP 0.1 publication APIs, signing formats (Ed25519), task protocol, examples and implementation notes. The site states no payment processing occurs and providers run on their own infrastructure. |
|---|
Evidence status and limitations
Evidence completeness: Not recorded
- The real-world operator identity was not independently verified.
- Module-level completeness metadata is unavailable for this legacy report.
At a glance
The checks that decide most of this verdict.
| Malware engines | None flagged itVirusTotal | Clear |
|---|---|---|
| Google Safe Browsing | Not listedGoogle | Clear |
| Abuse reports on the host | 0% confidenceAbuseIPDB, 255 reports; shared hosting inflates reports | Clear |
| Domain age | 1 days oldMost scam domains are under a year old | Risk |
| Web archive | Archived since 20261 snapshot | Clear |
| Certificate | Encrypted connectionIssued by YR2 | Noted |
The page as captured
Key findings
- Automated classification: Safe for Read-Only.
- Domain age: less than 1 year (registration continuity).
- Public web-archive history exists since 2026.
- VirusTotal and Google Safe Browsing had no flags for this domain; its hosting IP carries AbuseIPDB reports below the confidence level TrustSniffer treats as a flag.
Full analysis
Overview
TFABA is a technical documentation site for an open-registration agent-to-agent marketplace pilot. It presents APIs, signing conventions, task workflows, reference-client material, service discovery, and implementation guidance for software agents, with the stated model that providers execute work on their own infrastructure rather than through site-operated payment processing.
Scam/Impersonation Risk
No blacklist, phishing, malware, brand-impersonation, or conflicting-identity indicators were observed. The site’s content is internally consistent with a developer-focused marketplace registry: it describes Ed25519 agent identities, SIXP 0.1 publication APIs, signed task operations, provider-local execution, and a staged task lifecycle rather than presenting financial promises or requesting sensitive credentials through a login form. A reported-abuse signal associated with a shared CDN address was explicitly discounted because it was attributed to shared infrastructure, was whitelisted, and carried no site-specific confidence. The available evidence therefore supports an apparently benign technical project, although the operator’s real-world identity is not independently verified.
- The homepage describes TFABA as an “open-registration agent marketplace pilot” and states that providers execute tasks on their own infrastructure; page-level analysis found no fraud red flags.
- The homepage and documentation describe Ed25519 identities, signed registration and publication workflows, and task request, acceptance, delivery, and completion procedures; no login form or sensitive form was detected.
- The domain was registered in 2026 and is approximately 1 day old; archival coverage records 1 snapshot spanning 2026–2026, tracked across 1 year.
- External checks recorded 255 reports against shared CDN infrastructure, but the address was whitelisted, associated with Vercel, Inc. as shared infrastructure, and assigned a confidence score of 0.
Regulatory Verification Notes
The site presents an informational software and marketplace pilot rather than a financial, investment, or payment service, so the supplied material does not establish a regulated activity or a licensing claim. Its technical documentation is substantive, but it does not independently connect TFABA to a named legal entity or provide a verified operator identity. This is a verification limitation rather than evidence of impersonation or fraud. The available third-party broker-context check produced no match and should be treated only as contextual reputation information, not as a licensing determination.
- The homepage and documentation state that TFABA does not process payments and that providers perform tasks on their own infrastructure.
- The site provides linked documentation for tasks, inboxes, schemas, examples, and implementation notes, but the supplied pages do not identify a verified legal operator or licensing authority.
- The site is served from AS16509, Amazon.com, Inc., US; its TLS certificate is issued by YR2 at DV validation level and is valid to 2027-01-10.
- The site’s transport encryption was valid during analysis, and the broker-context dataset reported no match.
What to Verify Next
Before any sensitive or high-value engagement, independently establish who operates TFABA and confirm that any counterparty using the marketplace is separately identifiable and suitable for the intended activity. Review the task, signing, withdrawal, and provider-execution documentation before running the supplied client or downloaded guide; any code or control instructions should be inspected in an isolated environment. Contact-channel details should be confirmed through an independent route rather than relying solely on information presented by the site.
- The homepage directs agents to obtain and review a machine-readable guide before using command-line download instructions.
- The documentation set includes task, registration, publication, inbox, schema, and reference-client material that can be compared for consistent signing and execution behavior.
- The site advertises provider-controlled infrastructure and signed opt-in instructions, making independent validation of the provider and its execution environment relevant before task submission.
Summary Verdict
TFABA presents a moderate-trust, apparently benign technical project with no observed scam or impersonation contradictions. Its content and observed behavior are consistent with informational developer documentation, but the available evidence does not independently verify the real-world operator. The resulting posture is appropriate for informational and read-only engagement, with greater assurance required for consequential activity.
Infrastructure Integrity
The site is protected by a CDN/WAF layer, with observed edge addresses on AS16509 operated by Amazon.com, Inc. The origin server was not observable in this analysis, so the infrastructure provides exposure mitigation but does not independently establish site ownership or legitimacy.
Closing Assessment
Ordinary documentation review is proportionate, while operator and counterparty checks should be completed before sensitive credentials, code execution, or high-value commitments are involved.
Written analysis generated 2026-10-13 by the TrustSniffer Analysis Engine from the evidence in this report.
What the analysis found
4 findings contributed to this verdict, raised by governance, hosting and network, history in the web archive, registration and ownership.
01 Governance
- What the site offers, as described on its own pages, limits how high the score can go until more of it can be verified.Governance
rule:gov_business_model_cap
02 Hosting and network
- The domain was registered less than three months ago.Hosting and network
rule:DNS_NEW_DOMAIN_90D - The domain is young and has almost nothing else set up around it.Hosting and network
rule:DNS_SPARSE_YOUNG_DOMAIN
03 History in the web archive
- The web archive has almost no record of this domain, which fits a site that is new.History in the web archive
rule:ARCH_PEN_YOUNG_AND_SPARSE
04 Registration and ownership
- The registration record withholds contact details for the operator.Registration and ownership
rule:KF_WHOIS_HIDDEN - Registration details are held behind a privacy service, so no operator is named publicly. This is common and legal, and it also means there is nobody to check.Registration and ownership
rule:KF_WHOIS_PRIVATE
Signals weighed against the site
- AbuseIPDB: 255 reports on hosting IP 216.198.79.1 (Vercel, Inc, Content Delivery Network), 0% confidence. The reports are attributed to shared infrastructure, not specifically to this website.
Identity verification
| Status | UNVERIFIED |
|---|---|
| Identity score | 30/100 |
| Identity verification confidence | 25% |
- No on-site identity signals detected
Identity verification measures whether the site can be independently connected to a real-world brand or person. It is separate from the classification confidence.
What TrustSniffer observed
First-party facts recorded during the assessment of tfaba.net.
- The request stayed on tfaba.net. It was not redirected to another domain. Clear
- Registration is published under Squarespace Domains LLC. Clear
- DNS for this domain is served by squarespacedns.com, across 4 name servers. Noted
- The registration is paid up to 2029-10-12. Clear
- The earliest public archive of this site is from 2026-10-12. Clear
- It is hosted on AMAZON-02, from a server in US. Noted
Domain intelligence
| Registrar | Squarespace Domains LLC |
|---|---|
| Hosting | AMAZON-02 - Amazon.com, Inc., US |
| Country | US |
| Server IP | 216.198.79.1 |
| Name servers | NSC1.SQUARESPACEDNS.COM, NSC2.SQUARESPACEDNS.COM, NSC3.SQUARESPACEDNS.COM, NSC4.SQUARESPACEDNS.COM |
| CDN / edge network | Detected |
| Resolved IP addresses | 2 |
| Edge IP addresses | 2 |
| Likely origin IP addresses | 0 |
| SSL issuer | YR2 |
| SSL expiry | 2027-01-10 |
| Domain age | 0.00 years (continuous registration) |
| Domain expiry | 2029-10-12 |
| Archive first seen | 2026-10-12 |
| Archive snapshots | 1 |
| Reputation | VirusTotal: 0 flagged | AbuseIPDB: 0% confidence, 255 reports | Google Safe Browsing: 0 matches |
About this assessment
A trust score summarises the evidence TrustSniffer could collect about tfaba.net at assessment time. It is a starting point for your own judgement, not a guarantee: a high score means the signals were consistent with a legitimately operated site, a low or critical score means several risk patterns were present.
TrustSniffer assesses a website from the evidence it can collect at a point in time: domain registration and age, hosting and certificate, the content the site served, and third-party reputation feeds. A score is a summary of that evidence, not a guarantee and not a legal finding. There is no human rating and no user review in it. A site can change after it is assessed.